[iOS] iOS9.0 关闭系统强制使用HTTPS

Aug 24, 2015#ios #ssl #shares57

AI-generated summary

Starting from iOS 9.0, the default behavior of the Foundation.framework in iOS is to use SSL/TLS for HTTP requests. This means that all HTTP requests made by the program will default to requesting HTTPS content. If the app previously used HTTP, changes need to be made to the server configuration to support HTTPS access and to the info.plist configuration to allow the app to access regular HTTP websites. Failure to make these changes will result in a warning message in the log. Apple provides instructions on how to modify the info.plist file to allow HTTP access. If the app has a browser function, additional changes can be made to completely enable HTTP access. The original article can be found at the provided link.

iOS9.0 以后出于对请求安全的考虑默认将 Foundation.framework 中的 HTTP 请求协议更换为 SSL/TLS，也就是说所有由程序发起的 HTTP 请求默认将请求 HTTPS 的内容，而且在 HTTPS 出现 404 时不会请求 HTTP 的内容，如果你的 APP 原来就使用 HTTPS，基本问题不大，但是如果使用 HTTP 的话，就需要： 1. 修改你的服务器配置，使它支持 HTTPS 访问 2. 修改你的 info.plist 配置，让 APP 能访问普通的 HTTP 协议网站否则调试程序时会在 Log 中出现以下提示：

App Transport Security has blocked a cleartext HTTP (http://) resource
load since it is insecure. Temporary exceptions can be configured via
your app's Info.plist file.

修改 info.plist 时，APPLE 也提供了修改方法，在 info.plist 中增加以下内容即可

NSAppTransportSecurity
NSExceptionDomains
lidaren.com
NSIncludesSubdomains
NSTemporaryExceptionAllowsInsecureHTTPLoads
NSTemporaryExceptionMinimumTLSVersion
TLSv1.1

如果你的 app 具有浏览器功能，可以这样改，就可以完全放开 HTTP 访问功能了

NSAppTransportSecurity

NSAllowsArbitraryLoads

最后附上原文链接 https://stackoverflow.com/questions/30720813/cfnetwork-sslhandshake-failed-ios-9